topic Re: Update to new IP address on Nodes in Network Access Control

Update to new IP address on Nodes

Da ICS16 — Tue, 23 Jan 2024 03:33:00 GMT

Dear Community,

There are three deployment Nodes.

- Node1 as PAN

- Node2 as Secondary Node

- Node3 as pxGRID Node

Sceanrio:

- In case we perform update new IP subnet for PAN and pxGRID. Are there any impact?

Could you help to achieve change new IP on both Nodes step by step?

Any reload Nodes and down time?

Best regards,

Re: Update to new IP address on Nodes

Greg Gibbs — Tue, 23 Jan 2024 03:44:47 GMT

As stated in the Admin Guide, you can only change the IP address of the node when it is in standalone mode. To make this change, you would need to deregister the nodes from the PAN to make them standalone, change the IP addresses, wait for the ISE services to restart, then join them back to the cluster.

Re: Update to new IP address on Nodes

Da ICS16 — Tue, 23 Jan 2024 03:51:39 GMT

Dear @Greg Gibbs ,

Are there any MnT and PSN interrupt or not during the Node rejoin cluster?

How long does it take time?

Thanks,

Re: Update to new IP address on Nodes

Greg Gibbs — Tue, 23 Jan 2024 04:39:54 GMT

You don't state what nodes the PSN and MnT personas are on, but this is absolutely a disruptive process. Any node that has to be changed to standalone and have the IP changed will experience downtime. The application server will be restarted several times for the change to standalone, ip address change, then join back to the cluster, and each time it can take 10-15 minutes for the application server to start again.

This operation should be performed during a scheduled outage and you should allow for 1-2 hours for this procedure to be safe.

Re: Update to new IP address on Nodes

Aref Alsouqi — Tue, 23 Jan 2024 10:04:35 GMT

If the PSN and MnT personas are on separate nodes then changing the IP addresses on the PANs and pxGrid shouldn't affect your endpoints authentications and authorizations sessions.